How to create a read-only userid

[frederick hannah]

I would like to create a userid with RO ability
to files owned by other userids. Is that possible? I am using 11.11.

[OldSchool]

the ability to read/write/execute files, in a standard unix environment are attributes of the files themselves, not a given id. i.e. you can "allow others" to read a file, write it, execute it or any combination thereof.

acls might be a way to do this, but I've not messed with them in years, so my memory is foggy on this.

the short answer is "no".

[Tim Nelson]

File access is determined by each individual file's permissions. read,write,execute for ower, group and other.

If you can guarentee (key word here) that each and every file provides ONLY read access for "other" than you are good to go.

Best of luck.

There may be other solutions to lock specific users into a specific directory with restricted shell or ftp but these typically are faultly on the difficulty of setup and the all the required acesses.

I suspect that some audit or manager is asking for this. The best security is to not supply any type of access at all.

[frederick hannah]

I take it a "find" command combined with chmod for the specific user-owned files is the best option?

[Tim Nelson]

Only if you are absolutely sure that it will not break anything. I would not be so sure !!!

Some log files or other application files may require write perms for all, are you willing to run the risk at simply guessing which processes/application will work or not work after you execute this ??

I do not disagree with securing the system but you will need to research and test every change.

[frederick hannah]

Touche. Thanks for the info.